Data Protection and Privacy Compliance Statement

This statement outlines how personal information is handled in accordance with applicable Australian privacy and data protection laws. It provides an overview of key principles, user rights, and compliance considerations to help understand how personal information may be processed.

1. Legal Framework and Purpose

In Australia, the collection, use and disclosure of personal information are generally regulated under:

• Privacy Act 1988

• Australian Privacy Principles (APPs)

These regulations aim to provide individuals with transparency and some control over their personal information, increase clarity in data handling activities, and reduce the risk of unauthorised access or misuse.

2. Scope of Application

This compliance statement generally applies to:

• Activities conducted by the platform within Australia

• Data processing related to providing goods or services to users in Australia

• Handling of personal information through the website, apps, or customer support channels

Activities for strictly personal or household purposes are generally outside the scope of this statement.

3. Principles for Handling Personal Information

When processing personal information, the following principles are typically observed:

• Lawful and transparent: Information is collected and used on a legal and clear basis, with relevant explanations provided.

• Purpose limitation: Information is only used for specific and legitimate purposes.

• Data minimisation: Only necessary information is collected.

• Accuracy: Efforts are made to maintain accurate and current information where reasonably possible.

• Retention: Information is retained only as long as required for business or legal purposes.

• Security: Appropriate technical and organisational measures are applied to protect information.

4. User Rights

Under Australian privacy law, users may, where applicable:

• Request access to personal information held by the platform

• Request correction of inaccurate or incomplete information

• Request deletion or restriction of personal information under applicable conditions

• Raise questions or objections regarding specific data processing

Users may exercise these rights through the contact channels listed below.

5. Compliance Considerations

In handling personal information, the platform typically:

• Processes information in line with operational needs and legal requirements

• Applies reasonable security measures such as encryption or access control

• Assesses potential data security incidents and implements appropriate responses as needed

• Maintains records of relevant data handling activities

Further action is determined based on circumstances and legal obligations.

6. Cross-Border Data Processing

In some cases, personal information may be stored or processed outside Australia.
Reasonable measures are considered to ensure information remains appropriately protected in accordance with Australian privacy law.

7. Oversight and Consequences

Privacy compliance in Australia is overseen by the relevant regulatory authorities.
Non-compliance may result in investigations, rectification measures or other legal outcomes depending on the nature and severity of the issue.

8. Importance of Compliance

For users:

• Enhances understanding of how personal information is used

• Supports confidence when using online services

For the platform:

• Helps manage regulatory risk

• Contributes to reliability and long-term operational stability

9. Contact Information

For questions regarding personal information, privacy policies, or your rights, contact:

• Email: ask@sofimoa.com

Responses will be provided within a reasonable timeframe based on the nature of the inquiry.